东北大学与消费者报告合作的研究团队对来自19个品牌的21辆联网汽车进行了测试1,发现这些车辆正在向广告商、数据追踪器以及微软、Adobe等科技公司共享用户数据1。研究人员通过分析车辆在多种场景下的真实网络流量,采用DNS流量分析、TLS握手中的服务器名称指示以及传输量和时序等方法来追踪数据去向1。
研究人员在法拉第帐篷中停放了11辆电动车,以测试蜂窝信号丧失后数据流量的转向情况1。研究表明,使用车辆配套应用会加剧数据泄露问题1。2023年Mozilla基金会发布报告指出,"汽车是我们审查过的隐私最差的产品类别"1。
Researchers from Northeastern University and Consumer Reports have conducted a comprehensive investigation into data sharing practices among connected vehicles, testing 21 cars from 19 different manufacturers 1. The study reveals that these vehicles transmit personal information to advertisers, tracking companies, and major technology firms including Microsoft and Adobe 1.
The investigation analyzed real-world network traffic generated by the tested vehicles across multiple scenarios to document the extent of data collection and sharing 1. The researchers employed several analytical methods, including DNS traffic monitoring, server name indicators captured during TLS handshakes, transmission volume analysis, and timing examination 1. In one phase of the research, eleven electric vehicles were parked in a Faraday tent to observe how network traffic patterns shifted when cellular signals were disrupted 1.
The findings underscore longstanding concerns about automotive privacy. A 2023 report from the Mozilla Foundation had previously characterized cars as the product category with the poorest privacy protections among those the organization had evaluated 1. The current research indicates that privacy risks are particularly elevated when users engage with vehicle companion applications 1.
评论
还没有评论,欢迎留下第一条。